docs.qualcomm.com
https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html CVE-2026-24080
HIGH
Buffer Copy Without Checking Size of Input in Biometrics
Record summary
CVE-2026-24080 has a selected CVSS score of 7.8 (high).
Description
Memory Corruption when handling malformed request parameters in the fingerprint TA.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 4, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
SnapdragonBrowse Qualcomm, Inc. / SnapdragonDefault status: unaffected | CVE List | Cologne | affected |
| FastConnect 6700 | affected | ||
| FastConnect 6900 | affected | ||
| FastConnect 7800 | affected | ||
| QAM8255P | affected | ||
| QAM8295P | affected | ||
| QCA6574AU | affected | ||
| QCA6595AU | affected | ||
| QCA6678AQ | affected | ||
| QCA6696 | affected | ||
| SA6145P | affected | ||
| SA6150P | affected | ||
| Showing 12 of 36 version ranges | |||
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-24080